ICSA-24-319-17

icsaUScisa_csaf_ot

2N Access Commander (Update A)

view advisory published 2024-11-14

Successful exploitation of these vulnerabilities could allow an attacker to escalate their privileges, execute arbitrary code, or gain root access to the system.

01

describes (4)

Related CVEs.

IDseverity exploitable
CVE-2024-47256US—OT elevated—
Successful exploitation of this vulnerability could allow an attacker (who needs to have Admin access privileges) to read hardcoded AES passphrase, which may be used for decryption…
CVE-2024-47255UShigh7.8OT elevated—
In 2N Access Commander versions 3.1.1.2 and prior, a local attacker can escalate their privileges in the system which could allow for arbitrary code execution with root permission…
CVE-2024-47254UShigh7.2OT elevated—
In 2N Access Commander versions 3.1.1.2 and prior, an Insufficient Verification of Data Authenticity vulnerability could allow an attacker to escalate their privileges and gain r…
CVE-2024-47253UShigh7.2—
In 2N Access Commander versions 3.1.1.2 and prior, a Path Traversal vulnerability could allow an attacker with administrative privileges to write files on the filesystem and potent…
02

references

External citations — patches, advisories, analysis.

03

remediations (8)

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan